238 matches found
CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension
CMSmadesimple 格納型XSS v2.2.18 著者: Sergio 説明: CMSmadesimple v.2.2.18 のクロスサイトスクリプティング脆弱性により、ローカルの攻撃者が File Picker Menu の Top Directory に細工したスクリプトを介して任意のコードを実行できる可能性があります。 攻撃ベクトル: スクリプティング "File Picker Menu" の Top Directory における入力のサニタイズ処理の脆弱性により、ユーザーが Web ページにアクセスしたときに実行される JavaScript コードの注入が可能になります。...
PT-2026-83128
file picker aka flutter file picker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAY NAME obtained from ContentResolver.query directly in file path construction without...
Astra Linux – Vulnerability in Firefox
A ambiguous file picker design could have confused users who intended to select and upload a single file, into uploading an entire directory. This issue was addressed by adding a new prompt. This vulnerability affects Firefox versions earlier than 85...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0301-1 Rating: important References: 1247981 Cross-References: CVE-2025-8879 CVE-2025-8880 CVE-2025-8881 CVE-2025-8882 CVE-2025-8901 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes 5...
Astra Linux – Vulnerability in Firefox and Thunderbird
When creating a callback via IPC to display the File Picker window, multiple identical callbacks might be created at once. Eventually, all of them would be destroyed as soon as one of the callbacks is completed. This could lead to a use-after-free condition, resulting in a potentially exploitable...
MiracleLinux 7 : firefox-102.15.0-1.0.1.el7.AXS7 (AXSA:2023-6392:33)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6392:33 advisory. Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC ColorPickerShownCallback CVE-2023-4574 Mozilla:...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation of the File Picker in Google Chrome prior to version 139.0.7258.127 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
EUVD-2019-2081
Malware in sbrugna...
EUVD-2017-14518
Malware in sbrugna...
EUVD-2021-26161
Malware in sbrugna...
EUVD-2021-10877
Malware in sbrugna...
EUVD-2015-1462
Malware in sbrugna...
EUVD-2018-17858
Malware in sbrugna...
EUVD-2020-5901
Malware in sbrugna...
EUVD-2020-15491
Malware in sbrugna...
EUVD-2021-24956
Malware in sbrugna...
EUVD-2023-47777
Malicious code in bioql PyPI...
EUVD-2022-3156
Malicious code in bioql PyPI...